K67830124 : Linux kernel ext3/ext4 file system vulnerability CVE-2020-14314

Security Advisory Description

A memory out-of-bounds read flaw was found in the Linux kernel’s ext3/ext4 file system in the way it accesses a directory with broken indexing. This flaw allows a local user to crash the system if the directory exists. The highest threat from this vulnerability is to system availability. (CVE-2020-14314)

Impact

If the local filesystem has a corrupted index, a malicious attacker with local access to the Linux operating system may crash the BIG-IP system, making it unavailable.